// Legal

Privacy Policy

Last updated: March 2026

Tuga Hardware ("we", "us", "our") operates the website tugahardware.com. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

Tuga Hardware is the data controller responsible for your personal data. If you have questions about this policy or your data, contact us at support@tugahardware.com.

2. What Data We Collect

We may collect the following personal data when you use our website or place an order:

• Identity data: your name and title.
• Contact data: your email address, phone number, and delivery address.
• Transaction data: details of products you purchase, order history, and payment references.
• Technical data: your IP address, browser type and version, time zone, operating system, and platform.
• Usage data: information about how you use our website, including pages visited and navigation paths.
• Communication data: any correspondence you send us via email or the contact form.

We do not collect or store your full payment card details. All payment processing is handled securely by our third party payment providers.

3. How We Use Your Data

We use your personal data for the following purposes:

• To process and fulfil your orders, including shipping and delivery.
• To send order confirmations, shipping updates, and invoices.
• To respond to your enquiries and provide customer support.
• To improve our website, products, and services.
• To detect and prevent fraud.
• To comply with legal obligations.

4. Legal Basis for Processing

We process your personal data on the following legal grounds:

• Contract: processing is necessary to fulfil your order and deliver products to you.
• Legitimate interests: processing is necessary for our legitimate business interests, such as improving our services and preventing fraud.
• Consent: where you have given us consent, for example to receive marketing communications. You can withdraw consent at any time.
• Legal obligation: processing is necessary to comply with applicable laws and regulations.

5. Cookies

Our website uses cookies to improve your browsing experience. Cookies are small text files stored on your device when you visit our site. We use the following types of cookies:

• Essential cookies: required for the website to function, including cart functionality and session management.
• Analytics cookies: help us understand how visitors use our site so we can make improvements.

You can manage your cookie preferences through your browser settings. Disabling essential cookies may affect the functionality of the website.

6. Third Party Services

We share your data with trusted third parties only where necessary to provide our services:

• Stripe: processes card payments securely. Stripe's privacy policy is available on their website.
• PayPal: provides an alternative payment method. PayPal's privacy policy is available on their website.
• Shipping providers: we share your name and delivery address with our logistics partners to fulfil your order.
• Analytics providers: we use analytics tools to understand website usage. Data is anonymised where possible.

We do not sell your personal data to any third party.

7. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy. Order data is retained for a minimum of six years to comply with UK tax and accounting requirements. Contact form data is retained for 12 months unless you request earlier deletion.

8. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

• Access: you can request a copy of the personal data we hold about you.
• Rectification: you can ask us to correct any inaccurate or incomplete data.
• Erasure: you can request that we delete your personal data, subject to legal retention requirements.
• Restriction: you can ask us to restrict the processing of your data in certain circumstances.
• Portability: you can request your data in a structured, commonly used, and machine readable format.
• Objection: you can object to processing based on legitimate interests or for direct marketing purposes.

To exercise any of these rights, email us at support@tugahardware.com. We will respond within 30 days.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. All data transmitted between your browser and our website is encrypted using SSL/TLS technology.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

11. Complaints

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

12. Contact

For any questions about this Privacy Policy or your personal data, please contact us:

Tuga Hardware
Email: support@tugahardware.com
Website: tugahardware.com